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if the password is valid, providing the service; 

if the password is invalid, transmitting from the second computer to the first computer an 
^ update message to request that the password be updated; and 



forming an updated password. 



Please ADD following new claims. 



36. (NEW) A method for updating a password, comprising: 
receiving a service request message, the service request message comprising the 
password and being used to request a service; 

checking whether the password contained in the service request message is valid; 
providing the service if the password is valid; 

transmitting an update message to request that the password be updated if the 
password is invalid; and 

forming an updated password. 



37. (NEW) The method as claimed in claim 36, wherein after the updated password is 
formed, the service request message comprises the updated password and further comprising 
checking whether the updated password is valid. 

38. (NEW) The method as claimed in claim 36, wherein the forming the updated 
password comprises: 

receiving a password message containing the updated password, 

using the password to ascertain the updated password from the password message, 

and 

storing the updated password. 

39. (NEW) The method as claimed in claim 38, wherein the password message 
contains the updated password in an encrypted form, a key for encrypting the updated 
password being formed based on the password. 

40. (NEW) The method as claimed in claim 38, further comprising transmitting an 
acknowledgment message acknowledging the use of the updated password within the context 
of the communication link. 




3 Docket No.: 1454.1053 

Serial No.: 09/806,435 

41. (NEW) The method as claimed in claim 36, wherein the checking whether the 
password contained in the service request message is valid is performed using a monitor 
database indicating whether an update message has been previously transmitted. 

42. (NEW) The method as claimed in claim 36, further comprising 

checking the received service request message for its integrity, wherein the password is 
checked only if the integrity of the service request message is ensured and, if the integrity of 
the service request message is not ensured, the requested service is refused, wherein the 
service request message comprises a statement relating to integrity protection. 

43. (NEW) A method for updating a password, comprising: 

receiving a service request message requesting a service and comprising an 
authentication token; 

ascertaining a password from the authentication token; 

determining whether the password matches a stored password; 

determining validity of the password if the password matches a stored password; 

providing the service if the password is valid; 

transmitting an update message requesting that the password be updated if the 
password is invalid; 

receiving a password message comprising an updated password; 
checking the integrity of the password message; 
ascertaining the updated password using the password; and 
storing the updated password and providing the service. 

44. (NEW) The method as recited in claim 43, wherein the validity of the password is 
determined by 

ascertaining a current time at which the service request message is received, 
determining a first time statement indicating a time at which the password is formed, and 
determining a second time statement indicating a period of time for which the password 

is valid, wherein the password is valid if the current time is less or equal to a summation of the 

first time statement and the second time statement. 
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45. (NEW) A method for updating a password of a computer, comprising: 
receiving a service request message requesting a service and comprising an 

authentication token; 

authenticating the computer using the authentication token in the service request 
message; 

ascertaining a password from the authentication token; 

determining whether the password matches a stored password; 

determining validity of the password if the password matches a stored password; 

providing the service if the password is valid; 

transmitting to the computer an update message requesting that the password be 
updated if the password is invalid; 

receiving a password message from the computer comprising an updated password, 
where the updated password can be ascertained only by using the password; 

checking the integrity of the password message; 

ascertaining the updated password using the password; and 

storing the updated password and providing the service. 

46. (NEW) The method as recited in claim 45, wherein the validity of the password is 
determined by 

ascertaining a current time at which the service request message is received, 
determining a first time statement indicating a time at which the password is formed, and 
determining a second time statement indicating a period of time for which the password 

is valid, wherein the password is valid if the current time is less or equal to a summation of the 

first time statement and the second time statement. 

47. (NEW) The method as recited in claim 45. wherein the password message 
comprises an integrity statement used to check the integrity of the password message. 

48. (NEW) The method as recited in claim 45, wherein the authentication token permits 
the password to be presented in an encrypted form or in a one-way hash function form. 

49. (NEW) A method for updating a password between a first computer and a second 
computer, comprising: 
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entering via the first computer a criteria for a database query; 

receiving at the second computer a service request message based on the database 
query, the service request message requesting a service and comprising an authentication 
token to authenticate the first computer; 

authenticating the first computer using the authentication token in the service request 
message; 

ascertaining a password from the authentication token from the first computer; 
determining whether the password from the first computer matches a stored password 
in the second computer; 

determining validity of the password at the second computer at the second computer if 
the password matches the stored password, wherein the determining the validity of the 
password comprises 

ascertaining a current time at which the service request message is received, 
determining a first time statement indicating a time at which the password is 

formed, and 

determining a second time statement indicating a period of time for which the 
password is valid, wherein the password is valid if the current time is less or equal to a 
summation of the first time statement and the second time statement; 

providing the service request to the first computer if the password is valid; 

transmitting to the first computer an updated message requesting that the password be 
updated if the password is invalid; 

receiving at the second computer a password message transmitted by the first 
computer, wherein the password message comprises an integrity statement to check the 
integrity of the password message from the first computer; 

checking the integrity of the password message; 

ascertaining the updated password; and 

storing in the second computer the updated password and providing the service to the 
first computer. 

50. (NEW) A computer readable storage medium controlling a computer and 
comprising a process of 

receiving a service request message, the service request message comprising the 
password and being used to request a service; 
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checking whether tlie password contained in the service request message is valid; 
providing the service if the password is valid; 

transmitting an update message to request that the password be updated if the 
password is invalid; and 

forming an updated password. 

51 . (NEW) The computer readable storage medium as claimed in claim 50, wherein 
after the updated password is formed, the service request message comprises the updated 
password and further comprising checking whether the updated password is valid. 

52. (NEW) The computer readable storage medium as claimed in claim 50, wherein 
the forming the updated password comprises: 

receiving a password message containing the updated password, 

using the password to ascertain the updated password from the password message, 

and 

storing the updated password. 

53. (NEW) The computer readable storage medium as claimed in claim 52, wherein 
the password message contains the updated password in an encrypted form, a key for 
encrypting the updated password being formed based on the password. 

54. (NEW) The computer readable storage medium as claimed in claim 52, further 
comprising transmitting an acknowledgment message acknowledging the use of the updated 
password within the context of the communication link. 

55. (NEW) The computer readable storage medium as claimed in claim 50, wherein 
the checking whether the password contained in the service request message is valid is 
performed using a monitor database indicating whether an update message has been 
previously transmitted. 

56. (NEW) The computer readable storage medium as claimed in claim 50, further 
comprising 

checking the received service request message for its integrity, wherein the password is 
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checked only if the integrity of the service request message is ensured and, if the integrity of 
the service request message is not ensured, the requested service is refused, wherein the 
service request message comprises a statement relating to integrity protection. 

57. (NEW) A computer readable storage medium controlling a computer and 
comprising a process of 

receiving a service request message requesting a service and comprising an 
authentication token; 

ascertaining a password from the authentication token; 

determining whether the password matches a stored password; 

determining validity of the password if the password matches a stored password; 

providing the service if the password is valid; 

transmitting an update message requesting that the password be updated if the 
password is invalid; 

receiving a password message comprising an updated password; 
checking the integrity of the password message; 
ascertaining the updated password using the password; and 
storing the updated password and providing the service. 

58. (NEW) The computer readable storage medium as recited in claim 57, wherein the 
validity of the password is determined by 

ascertaining a current time at which the service request message is received, 
determining a first time statement indicating a time at which the password is formed, and 
determining a second time statement indicating a period of time for which the password 

is valid, wherein the password is valid if the current time is less or equal to a summation of the 

first time statement and the second time statement. 

59. (NEW) A computer readable storage medium controlling a computer and comprising 
a process of: 

receiving a service request message requesting a service and comprising an 
authentication token; 

authenticating the computer using the authentication token in the service request 
message; 
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ascertaining a password from the autlientication token; 

determining whether the password matches a stored password; 

determining validity of the password if the password matches a stored password; 

providing the service if the password is valid; 

transmitting to the computer an update message requesting that the password be 
updated if the password is invalid; 

receiving a password message from the computer comprising an updated password, 
where the updated password can be ascertained only by using the password; 

checking the integrity of the password message; 

ascertaining the updated password using the password; and 

storing the updated password and providing the service. 

60. (NEW) The computer readable storage medium as recited in claim 59, wherein the 
validity of the password is determined by 

ascertaining a current time at which the service request message is received, 
determining a first time statement indicating a time at which the password is formed, and 
determining a second time statement indicating a period of time for which the password 

is valid, wherein the password is valid if the current time is less or equal to a summation of the 

first time statement and the second time statement. 

61. (NEW) The computer readable storage medium as recited in claim 59, wherein the 
password message comprises an integrity statement used to check the integrity of the 
password message. 

62. (NEW) The computer readable storage medium as recited in claim 59, wherein the 
authentication token permits the password to be presented in an encrypted form or in a one- 
way hash function form. 

63. (NEW) A computer readable storage medium controlling a first computer a second 
computer and comprising a process of 

entering via the first computer a criteria for a database query; 
receiving at the second computer a service request message based on the database 
query, the service request message requesting a service and comprising an authentication 



